ba1650eca8a52780dc1cc6f1f3caf7b3_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ba1650eca8a52780dc1cc6f1f3caf7b3_JaffaCakes118
Size

522KB
MD5

ba1650eca8a52780dc1cc6f1f3caf7b3
SHA1

3cdfbd22f6684634ddbe3497346544e7ee219751
SHA256

a7d4034649bce59d3ec777336d0d61d4585996473b5b03aa240f48822c67dd50
SHA512

effade659b0008b6e15a37613c27261235664a074141c610c7c6820dc42f4952f3c5a77406c73a34ec09be0b57d14ccb6b6c3014aa7a754584075f94e51aeeb7
SSDEEP

12288:b4F/3DNsTM8vjXw60SY+k7+hme2V3wAxGX4G62WIQ:bkDYb0SAQH2VnRG6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba1650eca8a52780dc1cc6f1f3caf7b3_JaffaCakes118

Files

ba1650eca8a52780dc1cc6f1f3caf7b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db45fd7f81a949a1a1743439d8bac4ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBkColor
PlayMetaFile
Rectangle
EndDoc
CheckColorsInGamut
SwapBuffers
GetLogColorSpaceW
GetTextExtentPointW
GetTextExtentPoint32W
GetCharWidthFloatW
GetClipBox
ResizePalette
SetPixelFormat

kernel32

TlsSetValue
SetFilePointer
HeapDestroy
GetCPInfo
TlsAlloc
RaiseException
SetHandleCount
ContinueDebugEvent
SetStdHandle
HeapSize
IsBadWritePtr
VirtualFree
LoadLibraryA
CloseHandle
GetCurrentThreadId
TlsFree
SetLastError
SetEnvironmentVariableA
HeapCreate
CreateMutexA
WideCharToMultiByte
GetTickCount
FindNextChangeNotification
LeaveCriticalSection
GetProcAddress
GetLocaleInfoA
EnumSystemLocalesA
GetStdHandle
EnterCriticalSection
LCMapStringW
IsValidLocale
InitializeCriticalSection
TlsGetValue
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetStringTypeW
GetLastError
MultiByteToWideChar
GetTimeZoneInformation
GetACP
GetLocaleInfoW
QueryPerformanceCounter
FillConsoleOutputAttribute
InterlockedExchange
CompareStringA
CompareStringW
WriteFile
GetTimeFormatA
VirtualAlloc
VirtualQuery
FreeEnvironmentStringsW
GetCurrentThread
FlushFileBuffers
GetSystemInfo
OpenMutexA
GetCurrentProcessId
LocalHandle
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentStrings
TerminateProcess
GetEnvironmentStringsW
GetOEMCP
InterlockedCompareExchange
GetStartupInfoA
VirtualProtect
GetUserDefaultLCID
GetVersionExA
ExitProcess
RtlUnwind
IsValidCodePage
GetCommandLineA
DeleteCriticalSection
ReadFile
FreeEnvironmentStringsA
WaitForMultipleObjectsEx
LCMapStringA
GetFileType
GetStringTypeA
GetFileAttributesW
lstrcmpA
GetCurrentProcess
HeapReAlloc
HeapAlloc
GetDateFormatA
GetThreadSelectorEntry
HeapFree

shell32

SheChangeDirExW
SHQueryRecycleBinA
SHEmptyRecycleBinA
FreeIconList

comctl32

InitCommonControlsEx

user32

SwapMouseButton
EmptyClipboard
RegisterClassExA
CharNextW
RegisterClassA
EnumDisplayDevicesW
EnumPropsExW

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db45fd7f81a949a1a1743439d8bac4ed

Headers

File Characteristics

Imports

gdi32

kernel32

shell32

comctl32

user32

Sections

.text Size: 192KB - Virtual size: 192KB

.rdata Size: 8KB - Virtual size: 26KB

.data Size: 314KB - Virtual size: 313KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 192KB - Virtual size: 192KB

.rdata
Size: 8KB - Virtual size: 26KB

.data
Size: 314KB - Virtual size: 313KB

.rsrc
Size: 6KB - Virtual size: 6KB